17766 matches found
Exploit for Improper Restriction of XML External Entity Reference in Ivanti Connect_Secure
CVE-2024-22024 Check for CVE-2024-22024 vulnerability in Ivant...
CVE-2024-25148
CVE-2024-25148 affects Liferay Portal versions 7.2.0–7.4.1 and certain Liferay DXP/older unsupported releases. The vulnerability stems from leakage of the doAsUserId URL parameter when creating linked content with the WYSIWYG editor and while impersonating a user, enabling remote authenticated us...
CVE-2024-22012
CVE-2024-22012 : A Google Pixel-related out-of-bounds write due to a missing bounds check can lead to local privilege escalation without user interaction. Affected component: Pixel bootloader (per Pixel Update Bulletin).CVSS shows LOCAL access, LOW exploit complexity, and HIGH confidentiality/int...
CVE-2024-22021
Vulnerability CVE-2024-22021 affects Veeam Recovery Orchestrator products in limited older branches: Recovery Orchestrator 6, Disaster Recovery Orchestrator 5, and Availability Orchestrator 4. A low-privileged Plan Author can retrieve plans from a Scope other than their assigned one. Root cause d...
CVE-2023-42765
CVE-2023-42765 affects Westermo Lynx Lynx 206-F2G devices. The vulnerability is a cross-site scripting (XSS) in the SNMP configuration where an attacker could inject arbitrary JavaScript via the username parameter in the web interface. Affected product/firmware context is primarily Westermo Lynx ...
CVE-2023-40544
CVE-2023-40544 affects Westermo Lynx 206-F2G (Lynx model, firmware 4.24) and is described as cross-site scripting/cross-origin issues with cleartext transmission of sensitive information over TCP. The public description confirms an attacker with network access could sniff TCP traffic to obtain se...
CVE-2024-23344
CVE-2024-23344 describes an information-disclosure risk in Tuleap where, during a multi-user permission validation, some users could access restricted information (e.g., contents of artifacts or email notifications). The issue is categorized as an authorization/bypass-type disclosure affecting Tu...
CVE-2024-1271
No description is available for this CVE...
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to PyArrow arbitrary code execution vulnerability ( CVE-2023-47248)
Summary Potential PyArrow arbitrary code execution vulnerability has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-47248 DESCRIPTION: PyArrow...
Memory corruption
freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function...
IBM Security Access Manager Unauthorized Access Vulnerability
IBM Security Access Manager is a product for information security management applications from International Business Machines IBM. The product enables access management control through integrated appliances for web, mobile and cloud computing. An unauthorized access vulnerability exists in IBM...
IBM Security Access Manager Data Forgery Issue Vulnerability
IBM Security Access Manager is a product for information security management applications from International Business Machines IBM. The product enables access management control through integrated appliances for web, mobile and cloud computing. IBM Security Access Manager is vulnerable to a data...
CVE-2019-8229
creationtimestamp| type| source ---|---|--- 2024-02-04 16:16:26+00:00| seen| https://t.me/ctinow/178867...
CVE-2023-6240
CVE-2023-6240 is documented as a Marvin vulnerability side-channel leakage in the Linux kernel RSA decryption operation. The connected Nessus entries confirm this CVE is listed among multiple advisories, referencing the same vulnerability block and associating it with Linux Kernel RSA decryption ...
Security Bulletin: IBM Maximo Application Suite - IoT Component uses urllib3-1.26.14-py2.py3-none-any.whl which is vulnerable to CVE-2023-43804 and CVE-2023-45803
Summary IBM Maximo Application Suite - IoT Component uses urllib3-1.26.14-py2.py3-none-any.whl which is vulnerable to CVE-2023-43804 and CVE-2023-45803. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2023-43804 DESCRIPTION: urllib3...
CVE-2023-50937
CVE-2023-50937 affects IBM PowerSC versions 1.3, 2.0, and 2.1, where the use of weaker-than-expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. The issue is described in IBM’s PowerSC advisories and cross-referenced in X-Force (ID 275117). Affected f...
CVE-2024-22851
CVE-2024-22851 affects LiveConfig prior to 2.5.2. The issue is a directory traversal in the /static/ endpoint that allows a remote attacker to disclose sensitive information. Affected component is the LiveConfig web interface; root cause is improper validation of path traversal in requests to /st...
Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) - Credentials Disclosure
Electrolink FM/DAB/TV Transmitter login.htm/mail.htm Credentials Disclosure Vendor: Electrolink s.r.l. Product web page: https://www.electrolink.com Affected version: 10W, 100W, 250W, Compact DAB Transmitter 500W, 1kW, 2kW Medium DAB Transmitter 2.5kW, 3kW, 4kW, 5kW High Power DAB Transmitter 100...
CVE-2024-21794
CVE-2024-21794 affects Rapid SCADA before version 5.8.4. The issue is an open redirect on the login page caused by improper data handling, allowing an attacker to redirect users to malicious pages. Affected product: Rapid SCADA (Rapid Software LLC). Root cause: open redirection via login page. Im...